Privacy Policy
How we process personal data on OLDPIK.COM
This English version is a translation provided for convenience. In the event of any discrepancy, the Spanish version prevails.
Data controller
The controller of the personal data collected through OLDPIK.COM is:
Controller
Alpex Digital, S.L.
Tax ID (NIF)
B47481833
Registered address
Guipúzcoa 1, 1.º B, 47012 Valladolid, Spain
hello@oldpik.com
Phone
647 539 692
Registered in the Commercial Registry of Valladolid, Volume 965, Book 0, Folio 61, Section 8.
Hereinafter, OLDPIK.
This Policy applies in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on the Protection of Personal Data and guarantee of digital rights.
Data we process
OLDPIK can be browsed without registering. Depending on how the service is used, we process the following data:
Registration and user account
Name, email address, password (stored in encrypted form), preferred language and, optionally, a profile photo.
Sign-in with Google, Facebook or X
Account identifier, name and email address provided by the chosen provider. OLDPIK does not receive or store the password for those services.
Contributed content
Photographs, titles, descriptions, dates, locations, sources and comments. This content is published together with the name and public profile of the user who contributes it.
Contact form and email
Name, email address, subject and content of the message, as well as any documentation provided with a claim.
Technical data
IP address, browser and device type, date and time of access and the server logs needed for the operation and security of the service.
Browsing data for analytics purposes
Only when the user has accepted it in the cookie notice.
Approximate location
When the user authorises it in their browser, their location is used solely to show nearby photographs and is not stored.
Purposes and legal basis
Managing the account and contributions
Creating and maintaining the account, publishing and attributing contributed content and applying the Terms and Conditions. Legal basis: performance of the relationship established on registering and accepting those terms (Art. 6(1)(b) GDPR).
Handling enquiries and claims
Replying to enquiries, historical corrections and claims regarding rights. Legal basis: legitimate interest in dealing with the communications received and, where applicable, compliance with legal obligations (Art. 6(1)(f) and 6(1)(c) GDPR).
Security and abuse prevention
Protecting the service against automated access, fraud or unlawful use, including the use of verification systems. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
Service-related communications
Email verification, password reset and notices regarding the account or contributed content. Legal basis: performance of the relationship with the user (Art. 6(1)(b) GDPR).
Web analytics
Understanding, in aggregate form, how the site is used in order to improve it. Legal basis: the user's consent, which may be withdrawn at any time (Art. 6(1)(a) GDPR).
Archive for cultural, historical and research purposes
Preserving and disseminating historical photographs and their documentary information. Legal basis: legitimate interest in the preservation and dissemination of photographic heritage (Art. 6(1)(f) GDPR), with the safeguards set out in section 8.
OLDPIK does not sell personal data or use it to build advertising profiles.
Retention period
Account data is kept for as long as the account remains active. Users can delete their account from their profile or request deletion by email.
Contributed content is kept for as long as it remains published, as set out in the Terms and Conditions.
Enquiries and claims are kept for the time needed to deal with them and, afterwards, for the limitation periods of any liability that may arise.
Technical logs are kept for the time needed to guarantee the security of the service.
Once these periods have elapsed, the data is deleted, or kept blocked where there is a legal obligation to do so.
Recipients and processors
OLDPIK does not disclose personal data to third parties unless legally required. To provide the service it relies on providers that may access personal data on behalf of OLDPIK or receive technical data from the user's browser:
Hosting and storage
Infrastructure, web hosting and file storage providers, including Amazon Web Services (European Union region).
Email delivery providers used for service communications.
Google Analytics (only with consent), reCAPTCHA on the sign-in and registration forms, and sign-in with Google.
Cloudflare
Turnstile verification on the contact form and delivery of technical libraries.
Meta and X
Sign-in with Facebook or X, only when the user chooses that method.
Maps and technical resources
OpenStreetMap (map images), jsDelivr and Bunny Fonts, which receive the browser's IP address when those resources are loaded.
International transfers
Some of the providers listed are established outside the European Economic Area or may process data outside it, in particular in the United States.
In those cases, transfers rely on an adequacy decision of the European Commission —such as the EU-US Data Privacy Framework— or on standard contractual clauses or other safeguards provided for in the GDPR.
Rights of data subjects
Anyone may exercise their rights of access, rectification, erasure, objection, restriction of processing and portability, as well as withdraw the consent given, by writing to:
Requests may also be sent by post to Alpex Digital, S.L., Guipúzcoa 1, 1.º B, 47012 Valladolid, Spain.
To protect users' data, OLDPIK may request the additional information needed to confirm the identity of the person making the request when there are reasonable doubts about it.
If you consider that the processing of your data does not comply with the regulations, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
People appearing in historical photographs
Photographs in the archive may show identifiable people. OLDPIK processes them for cultural, historical, documentary and research purposes.
Anyone who recognises themselves in a photograph, or their relatives, may request its review, correction or removal using the contact procedure set out in the Legal Notice and in the Terms and Conditions. OLDPIK will assess each request having regard to the rights to honour, privacy, one's own image and data protection.
Minors
Registration on OLDPIK is not intended for children under 14. If OLDPIK becomes aware that a child under that age has registered without the authorisation of their parents or guardians, it will delete the account.
Security
OLDPIK applies reasonable technical and organisational measures to protect personal data against unauthorised access, loss or alteration, including the encryption of communications and passwords.
No system is completely secure; should a security breach affecting personal data occur, OLDPIK will act as required by the applicable regulations.
Cookies
The use of cookies and similar technologies is described in the Cookie Policy.
Changes to this Policy
OLDPIK may modify this Policy to adapt it to legislative or technological changes, or to changes in the way the project operates. The applicable version will be the one published on the website at any given time, with an indication of the date on which it was last updated.
Contact
For any enquiry about the processing of personal data:
hello@oldpik.com
Phone
647 539 692
Address
Alpex Digital, S.L.
Guipúzcoa 1, 1.º B
47012 Valladolid, Spain
Last updated: September 28, 2026